Forum Discussion
Deactivating Option to change Profile Picture at myaccount.microsoft.com
As the title says. I would like to deactivate the option for users to change their profile picture at myaccount.microsoft.com. The profile picture at our company is synchronized to AD and via Entra Connect to Entra ID.
Is there an option as an admin to deactivate that option without deactivating the entire portal?
Kind Regards
Christopher Siebertz
The solution Microsoft provides for this scenario is the new "profile photo update settings". It allows you to configure which role(s) can be used for this operations, including allowing users to change their own photo. For the time being, the setting is only available via Graph though. I wrote a short article about it a while ago: https://www.michev.info/blog/post/6196/how-to-control-profile-photo-updates-in-microsoft-365-via-the-photoupdatesettings-control
4 Replies
- KaliNCopper Contributor
You can via Graph: https://learn.microsoft.com/en-us/graph/profilephoto-configure-settings
- petrmusilleedsCopper Contributor
I'm not sure but if you can deactivate that security part you will be not able to access your other services you have conected
The solution Microsoft provides for this scenario is the new "profile photo update settings". It allows you to configure which role(s) can be used for this operations, including allowing users to change their own photo. For the time being, the setting is only available via Graph though. I wrote a short article about it a while ago: https://www.michev.info/blog/post/6196/how-to-control-profile-photo-updates-in-microsoft-365-via-the-photoupdatesettings-control
- Ahmed_Masoud97Iron Contributor
To disable the option for users to change their profile picture at my account.microsoft.com , use Azure AD PowerShell:
- Connect to Azure AD:
- powershell -> Connect-AzureA
- Disable profile picture changes:
- powershell ->Set-MsolCompanySettings -UsersPermissionToChangeProfilePictureDisabled $true
This ensures profile pictures remain synced from on-premises AD via Azure AD Connect. Communicate the change to users, as they will no longer be able to update their pictures manually.